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[is**i] waw*fHBa«**fha!Jbs w-»jbfc«j 

ii^SIBg#^OS?S*tfflv>Ss iJ>ft< fcfc-**© 
««ftt&*£«7rt' =f U (c <fc o T^fiStT 5 

-r set *: -r * r->* * >v9mm 

[IS** 2] HuKW-SiJx-^tcJtLTButE^ffi-S^ffl 

v ^ r aw l rcw.=f-m& * vtassm x- * £ « k f aw s 
is** i fe*cox^^;ntsij«g§ 0 
[«**3] «neiBe«i:j:!>»&snfc. nmfrz 

[is** 4] w-ai«nfca#*^-r, n«fr6ot* 
^*MfBt«x-*.£tticfB^-r;i>»** i ffitto-rs? 

[IS** 5 ] '>ft < i: 1 r3©fl.«ffifi:i- H*iRS 
teiBKO^ 2 ;l/ttiftlflt»o 

fitt^1««£bTH$ix-£:7*--T-y h^Kfclfrr* 

ws**7] «^**w»T*i»KHfl^wiWK© 
v>-rn*»©m«*fieffl bfc©a»*is*{<tiifi* *t br® 

•v*— *7*— W h*"fc*&*fibT:fe<»**6fB«c9 
iS«ittjBIJ«8So 

[is** 8] wm<D<®m&*-£tswmnmmmc-o^ 

?£1f $8 ii b TiB^T 1 - i?y h^tctgSWT&IS* 
*6lB^OB^It)flffit§o 

[is** 9 ] wm<o&WL&if£tsmmttmmmc^ 
waut*7ccH«fHiiaM8t8tsi*n7£nffl5iH«#at 



[IS** 10] «^««>t1-ffl<:ttfl!-r«mU*tt 

[is**i i] « ; ?»*oinifc«ffl i r*w««*w- 

•J 7;H£^-&t?IS** 6 ~ 9 <DV>-f n*->lc|E«<0H« 

ffllJ«§§o 

[»**i 2] *?«*©im[Kffiffl-ra«F««*H- 

10 JCrsRHcfiEfflf SHflWt?l«II«tt, m^m^<DtYMic 
«fflrs*t«B«0»i:**4iP«*«trt«*W 6 ~ 9 CO 
^-fn*Hc IB«»iHf£ft$iJa§§o 
[»**1 3] t^*OlHlK:ISit81Wli4tt 
W-r*»K:ffiffl-r*iiiflW«fflHII«tt, «?«*0fWK: 

#&»** 6 ~ 9 tov^-rn*ncIBi8cDiii«WffliJ«li§„ 
BSflOKMOftBMM 
[0 0 0 1] 

20 tfBfl$HH!lflH8lcHU |fflSEttf^?;l/*^7, X* 
■v±, -tr>-9\ FAX (€fA) ^HA^ttenfcA^I 

[0 0 0 2] 

^ f-f T^r/T bTffiSlc 0 l& 0 ^ti5 * ? tc ft o T*5 

tifetDftSnT^ftfc^fco bfrU Wa'Jf^ 
SS^bO; -5 i: bTV>57C^t0r f — £#^IEft fccDT&ti 

ftSftv\, tc^cOx— ^^gfflJb^ASIftftSlfttcio 

*^IEbv><li:*«SE-r5C«^ ^co^ffico^^tc, 
£0f f -^«r^figLfc^#feb<(i ; e(D7 J -^lcgibT 
M^t^T^ 5 #com?S« %tt tot" 5 ft if 

[0 0 0 3] ^3)5fi?IJi:bT, ftHtttm 5 . 4 

9 9, 2 9 4#W*ffl»fCt±> xS^l^^fC^cD-r^ 
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^—It^r's $ y-'yfatO S ecure Proces 

s o r icROMftLTfa^snTfcsnasfre.M^m-r 
^mc^jgrrso sic. ff^ji/A^ l j-chhs 

[000 4] 

{cfe!b^t»P>-f, im??^^^^:***^* 20 
[0 0 0 5] £fc, ^5-Y'<-h*-t^^ , J«yd'4 t - 

[0 0 0 6] Mtc, J ri?Z)\>t)* ; 7pm.<Di*<<~*<Dmi& 
9 -5 5C fct?2& ■?> jELvM^Jtc&SLifi-eft^cDfciRg 

[0 0 0 7] £fc, ±l2ft*0jT1ix^£;b:*>*5{I^ 
tc fij t) «o 1t>*7V v * ^-^T^it ^ - * < to 
Wl? 5 c t E4rjW5tf, 7^>"*;l/# ^A^M&fcft 

[000 8] Wfo. T->*?iVA -7©<t ? ft— f 

«*B6«aSOE*ffltHl!lSBO«^tctt«fK:|t««*0 
[0 0 0 9] xv^n^^vO.fc-pft— Hfcx— *f so 



•tSfcLfra^etlT^^. Lft>U «*.»fcT* 
rt/df U XA©5*SjVffl»WKil < ft o T L£ 3 £ <^-5 *J 

[ooio] *&mzc-ti'b<offl&&*mfr-rzrcib<D 

[0 0 1 1 ] 

tic S o ±ot, *«LftaMMi 
[0 0 12] $fc, tt«f->K:»LTiMMI*ffl^T 

«Mth: * ») s nfc ^« ^ 6 » * e a ^ nifrgft ^ 
BB«iiw»*f^«-r 5 m.ic&m u ^ihhik: wts-r s to 

[0 0 13] Mtc, fNMSnfc«#*iiV*\ 

»t^^pjtift->-y>xs^iK^L, m^-^-y 

[0 0 1 4] Sfc, '>ft< fcfe 1 OO^gPKII^- K^r 
[0 0 15] Hie SiJtofga^tbTs a^<D^®S*iS 

* tc jito^iitt-r c t ic «fc "3 , atMHim * c » 6 n 

rca«ft^^A,^tlTV>ftV^i! 7 *>«HT*« «fc 7 ic 

TS«^f+SLfc<7Dft^B^5tT'#S 0 f^tSttt'l 
?¥S*«iStt L C £ IC <fc ^. Tl«f- £ ©, SESa^K 

[0 0 16] 
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[0 0 17] 

immvm jxf\ *?§w<d*&#j;£0mc»^ti8bs 

LfzmBT-2 J ?mmT*mm?Z> C T (Compute 
d Tomography) mMTMmi tmiXcWi 

SCTSlOi^taFBP (Filtered Ba 
ck Projection) SlCcfcSPHtSISfiESaS 

[0 0 1 8] 0 1 te*:fg0JlCDIg 1 (DnnmiZ&ZTisZ 

W%m<DBg^T>\'ZiVXL. (mx.l£R S A£MD 5& 
if) , Rrinai^HElcMffl-r^Bg^T^rfUXA 
tf D ES (Date Encryption Stan 
d a r d) o COD E S im&m.^ttcDm^T'l^ 

©WHtX/brJU , H«T r -*ffiW7' 

;l/=fUXA (WAtfJPRG) , aSfcR^X/HJUX. 
A, >»JffllXny5A«rtS*fl-r«»ROM 1 It, 
f >MffllXn^2», §aT7l/df'JXA, iffim®, 

rami 2 i:, ^Maft^som^sfttcaffl-rsiB 

^■yxm^^mmm^m-r^ eepromi 3 
t, m& l fcf^ * ^ji^b^- # tc ~>-y >x§ 

tESTS* m»f^*U*-K«OI C*— Fl 5«3 
R1lMB*tt*mu/»*ii**fT5 I Cfc-FU-Xl 

sfi^-h 1 6 mm?— 1 8 
t, *a©»p[*fTv^o»«j5ffiHii5*wjflir * cpu 

1 9 i:, SHgbfeiBttt**? f'-^teSjft-r* CCD2 

[0019] #ric. *Slffli^J©i!iv^»cc)v>Tl5i^-r5 
fc, ->+7^^>w^n«t> cpui9ti^-rv 

1 SlP^M?— £«8ffU ^RAMl 2lCfB« 



«kiRWtccD2o*>6 mmmmf- Z L T 

RAMI 2Jc+g*flfSo ^LT> ♦S)^^nfcB#T f — ^ 
^ff«t?.o E E PROM 1 3frP>v—X>X§ 

^^Dffi-rfclwimci/-^>'XS^c 1 ira^Xc^-x 

yXi^EEPROMl 3tctSffl-Ti)o ffiSfc^n/cili 
-TT l 8*->615tf# LWIf- ^«r#*0-rSo fLT, 
1f$filc{tiJPLT, — 0<Dm.£LT<Dm&mmtLT 1 C 

10 *-ki 5ic&mf2> 0 m&m. avmumm. ~>-x 

RSEOUiti, ttffiBKKflyB-rsx/l/rf U XAttCT^tf 

d e s*tem?%m&*micm%t.&n : <Dzfm-en*>o 
[0020] 9??, rtWT*a»*«£3-*i\ 

-FfcltlSrr*. J tti6©=i-K*«-a , rntf^«BK 
RAMT'1IUT^577^ «lfiFALSEi: 

20 r*) ^TRUEicfiti.o ji>ap*»ea«ft«x &»mi 

*X*#!?gU ^tl#F A L S E tfc^Tt^&il-g-tCti 

£rt? o tt*a'Jf-fXr-3!X^FA L S Etc^MT 
5. 

[00 2 1] ^lc, *HffifflJK*3lt5trjB0-r-^tcJ*-r 
30 (CCD*— h*— 

a^m^. Uf'^s 101), ^nrv^^v^-a-asa 
m*®T-r %t>\ ^fiStsnxvxuf 12 101 c *— f 1 

5fr*ba.—-*f'j>m8mm i B*:m%-t2> (X-r-vXS 1 0 
2) o CCD2 0*»69KHf*— ^- (»»x-^) 

S 1 0 3, S 1 0 4) o ?Lt, SctiL/ctrSiJ-r-^lc 

F^oaSHsEfciSU JQ.SSf*OfrS!J-r- 
40 ^%Blfflr-rS (X-t^-vXS 1 0 5) o EE PRO 

Ml 3*^X5-1'^— h*— ■ 4>B8aiEW» • X> 
XS^^tf-Ti. (X-r-yXS 1 0 6) „ ltf#L/-">— 
X>X#^tC UglHJ««TE EPROM 1 3lCt&*fiT3 
(Xx-yXS 10 7) = «!S^*Otrii-'r— ^ic^ft^f 
?3JR X >X#^%ji*rJ2nTfc tO^rtrSiJIt^ i: 
-T5 (Xx-yXS 1 0 8) o CCDltaiJ1f^c«LT^>y 
^affiftfrll-rs (Xx-yXS 1 0 9) o nWLtc'^y 

?w%*mntz> (xx-yxs 1 1 o) . ±Etmc*ti 

so fcM-yS'affliS I CA-FfeJSU ^-X*CiX5Y^- 
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f'V^Slll). ?LT, tHMflWHtcStBOB^S* 
Rtf fcMBSHBBfciiini U ^BOW^^^Ol+ifl'Jtt^ 
tt5 Ut'^S 112). JEK. n— w?*** 

W-SHWHfcf* (X-r-y^S 1 1 3) . UJ3fe±*^ft* 

ae»r* (xttia«*-h i 6^6nsrasiiicasmr 
5) (Xx>y7s i i 4) o 

[0022] Bff^«usmgRcfeiB«m« 10 

t\mmmc lt it www&m. a.—*f<o 
ntfa— yum-v&itcfr mx-j mm? ztt-ez z> rz 

+W^aE2nT £ A vnt^fci— *f S^r *r >X# 

immgimtfi c*-ku— ^i 4&i§ig-rs ! 2®±fc 

^H^e>T^-feX-e^*V^«fc-5lc-rSi2'SA^So 

[0023] sf=, miammm 

liHG&x— * £ d ^ e, (i U gi o TV> 5 <Dti\ 



fit, S**nfe« ; F»** : f*J>St«L 

[0 0 2 4] iMc, ^r— <T^fiSt5aaicov>T@ 4 Rt>* 
E E P ROMtcf eg^nrv^SA^ if •5*^19'^ (X-r-y 

nrv^v^stf, 0 4t^-rj;3ic, a^T^^u 

XAlCfcO^-^Z^r^-TS (XT77S 2 0 2) „ 
f LT> £jj£Lfc^— ^rteE E P ROMfclS^£ft3 
(Xr77'S 2 0 3) „ ^Ic, *-^7©5WJ^ 
h*^LTfl.««BfcjaSBSft* (X 
T77"S 204) „ m 4 tii^-r J: 3 JC, ^gp^Btcfev^ 

K^MWEQISid: afli #- h ^/T b T ^ 'J Z ;H+«iJHg§ 
CgSnS (Xf77"S 2 0 5. S 206). fU, 
^gfl»EWS«E E P ROMlC feii£n3 (X-x-yT'S 
2 0 7) = 

[0 0 2 5] ^fc, W-»J*BOrt8P*l' , ^*K^ , r*«i 

*-/^-y K^p>^X"7-K*A7JU ltPJ^B*^g!5tc 
«^LTV^^XV-Fi:Ba^LTIELttna^-l'v(D 

«ltv^©t% #^©i c*— K«wx*nrv»** 
-&ic©*^-r^os^«r^M-e# %> <fc 3 ic-r ^ c t t>m 

ttfx-gZo m6 \zm? &5fc : ?i£>Mtwm&*~x<D^ 

r'Jy**-*tt8liat«rt»»c*«lLT43<o ftT, 

E=i-K«:«^brcasi' a-rntf 1 c*— k»*b 
[002 6] Bg^7';^d r, JXA^DMffi^!la^cov^T^i, 

Bf^SaS^n 7*7 AfcgttifcS C i: a^t- t ^ <fc 5 IC -r £ 
,fc 3 fcc 5n«o X«07lc^-r«fc3H:. 
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[0027] s /-c±teT-t±Bi^T;vdr'jXAcoM#f5aa 

< . m\c iMPbfr-Z?t?ft<^«fc r> lc LTfcl^. 

T-ZZo -?-nf£tfT& < . SVT'rt/rJyXAfcJt'*, ft 
SPfcDW^7;b=ruXAtca^R|3b^o*>§Rlfi6tt*^^ 

mtzic-OXb —A/ LfcHg-Sf 7;b:3 y XAtc <fc 5 

TVl/rfUXAlcoi^-Cfciu *rU,-»7Vl'=fyXA(4*Dtr 

^AtLT<OAtllix.-t?ft<, *§jMiyo^7i»** 
f?r SXn-fe -y ^(DAtlfx^fr^ <fc •? £ LT t>av>„ 

yt^a-MiiltfPCMC I A*— Kft if<D,fc? 
4»i##jl6hS, Xtt, «#«LSXa-fe-)/+rk»r'S!l 
Sell t ©IHOWaWJ&W 7 x-^*W»ft tOtc L 
H-»J^BtOXa-tr-y9-i:Bg^j!asXD-te-y9-i:<0 
H<0Xa h 3;l/?rimfc fctOtc LT^MK-T 3ft if<0 

■fe -y tffcMW Sifcgtift v\, ftjiJ^BcoX n -b «y ^ i: 
Bg^®S<Ofc46<DXa -tr -y -9-lc^lt/c^(0|t?Bi)^B<0 

[0028] ±kb i Brmf-^^ic 

46N U L L^-f >^b/c^c«<OIt?fliJx-^±mc*tL 
TxS^Jl/ttSflBBtfB^BfcfcSrBU ^<OS?^£, 

©*ffi©«#, WSl-r-^fcm^BfcfclflBLfcB-P, 
5 5 fcfHMr- * O+KflfiOflWH, m * > r- * if 

6te©«tt««*fr«!l'r--* KW*flQ*.fc <0 , ItPJx- 

£j!jo*. fc 0 -T S i: . trffix- * i **<Sfc 3 x- * i: ft 
oTL$o\ *?S^tO^II*^pItltftSarH614A^ 

[0 0 2 9] tCT% WTfcKWr*SB2<0*M»|f4, 
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tORtttf tt&fiin LfcRfc: fc«^*©*8E*priJBic-r 

3&<0T"&3 o 

[0 0 3 0] £5 2 <0HS&#Kco^T E xi f (E x c h 
angeable image file forma 
t for digital still earner 
a) <DWm7*--*v hZmteLTWm-rZo E9tiE 
x i f tOSfti?*— T-y hOrtS^-r^T^So ft 
fc\ ft^^Si:, ^<O1t^g£c0«14tf$Bti. H^ffii^ 
ftfttcBB-rSflNR^SSiS-rSE x if IF DStfG P 

10 sifffi^rfeis-rsG p s i f d, tm>nc-te*3.VT-< 

mn*f£j&?Zrztb<D$7<DM3i'!)-e%>2> S e c u r i 
t y I FDfcV>3fc©*r«gfc:S*U teSWTSCi: 
^*}fc#iJi:LT#*T^;5, 0 ^(OlStC, Ex i f IF 
D-^G PS IF Dfc«ftSiJ7-^ (f^^/l/*^70 
if^tc tt fy' £ fr^Mr— Z ) ©BUB* * IIS* 5 <Otc a 

^*5B^B*fc*!)«BLfcMII«-l?ifc9, Sfc^SS 
tOCtfttfEu frjflJ-r— ^*{*^t0fe(Oi:, *-*i£:?f£ 
20 ■rstOlc^fcftSW^lcovTfc^BL/'cV^^* 
MtetfJtctiDQTV— yjfrP,E0 I^-*<0¥hu^ 
-efe«BLfc^<0t?a5S o LfctfoT, fflJAlf E x i f 
I FDtGPS I FDfcDQTV-A^e.EO'lv- 

BExi f IFD^GP.S I F DOfptctin^Oh^r 
fB^-t?$S<fc^lcftoT*3t>, WEx if I FD 
cOtptC=i^>h^:ii)!jPLTL$ofc«^ Ex i f I 
F DAUXMfcgftSmeUcft^TLi^T-c*. m^B* 
so OSliEm6<4oTL$% ^-CT's S^g^^fr 

Bttlt « L TEBT * * 3 1 r * o 
[00 3 1] #lc, WBSti/t'T^^/PiiiBfcjttLTB 

BM5„ Ctm •TTIC'r r > 7 ^;l'BiBa J P E G (E 

x i f) y*--?v hircm^snri^ct^m^vr 

[0 0 3 2] (1 ) 9c-?, «SL/cV> mnicLfzl^ 
iSBx-^XhU-A (^J^tfDQTT-*^e)EO I 
40 V-ACDfMSt*) IC^LT, SHA-l^MD5t^ 
^ft;N7->a7;WJXATv\7->afi 0#BB) «ri+ 
Il-TS (Xx-yXS 1 00 1) o CcOtrS^nfcfl^-r 
^ — i/V n -y a. fit i: W&o 

[00 3 3] (2) ^^->*A7->aT'$5Ci:^1- 
^y#<**fflV\ Va l u e&tVT9c<D'(*—is^y 
->n.fil^OTL V-r— (Tag 

TT] T*^I2) . Length (0* TLJ T'SIB) , 
Value (0"43 Tvj TSE) ) (XT7 
XS l 00 2) o CtOf^fiK^tlfcfetO*^^— ^N>y-> 
so af-^Il/^> h i:B?^o 



(7) 
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[0034] (3) Exi f7*-V^ Hc*tLT*Tb 
< JSi^^LfcS e c u r i t y 1 FDlC, 5fet0^y 

1 0 0 3) o 

[0 0 3 5] (4) E x i f IFD, GPS IF 
D, Security IF DlC^ZftZ, UUWMt 

5 Uf7^S 1 0 0 4) o <:n^vr>a^yuxh 

&*3> C<DAyS/A*^lJXhfc:ttE x i f 
I F D(D*0)i^B^T-^Xl/^y Secur 10 

i t y I FDlDW^^A^y^af-^xWV 

<<£>o 

[0 0 3 6] (5) Ay^#yUXHC$fe5ft*:£ 
Wcttfo?%&T—$3L\s*>h(DV a 1 ueg£ (V a 
1 u e«*U'W h*ja^TV^TgiJO«3fti:*3KOV a 

3W**lTV^ V a 1 ueS5) £rjHlc S H A - 1 WD 5 
£ V> o te/ n y is ^ T)13 V XA tc£Hj\ — o© a y > ^ 

m*mw-?z> (xt7/s i 005) o cmm^ntz 20 

[0 0 3 7] (6) f-^>7yit^§Ci:^t^ 
^S^*fflV\ V a 1 u egfli: LT^CD-x— *AyS/a 

S 1 0 0 6) o COM^tl/ct)^^f-^A«r>af 

[0 0 3 8] (7) 9c<DT~S*'^yis=Lte&. "ri/Zfr 

f £ (Xf7^S 1 0 0 7)o CCOBg^ft^nfcfeiD^ 

[0 0 3 9] (8) f-^fiSTSSCfc^t^yS 
#*fflV\ Va 1 u effikLT*0^-*»£<Dffi*J# 
OTLVf^Xl/^>b^Mt§ (Xf^ySlO 
0 8) o COM^nfcfe^r-^i^if-^xU^ 

[0040] (9) Security IFD lz9u<D : r 
-^A7i/af-^xW>hfc, f-^l^f-^X 
U*>h*iIAnTS (Xf 7ys 1 0 0 9)o 

[0 0 4 1] (10) tffttfofcE x i flif-^ 

[0 0 4 2] BHBfcttjfi^TV^fcV^ T I F F (D^r— 
£i§1^ (a?2/ 8' WhSA) fctt, VtCgiJ 

[0 0 4 3] C<D£o ICLTttjUZtircW^mZttZtD 

[0 0 4 4] ^c*r, J P E G (E x i f ) X 
-*i€r-*xUj?«>KDV a 1 u e SB*B* 0 WTo so 
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* m& * t*J Z fr* * =7 (O^ 7 V v 2 T*m%t 

£ 0 JPEG (E x i f ) H«fr&. f-^A»r>af 
-^x^>hOV a l u e«5*ffit)W-ro ^SEffix- 

^ffbnt^So J PEG (Ex i f) BH»fr5, a 
7^a?^JXhf-^xW>KDV a 1 u effi«K 
K> tB-To A>r>a^^UXb &cf3^2 nrv^s * ^ic^ 

anf-jrxi/^^nov a 1 u eBP*mstcffiom 

Ls Ay?/ a7 ;l/ =f U X2* £ ant T a y v ol ffi«r fh*T 
5 0 s fW> n y a ft £ 9c(D; » y a-iltf-ST 5 £ 

(DS^ff^tiTi/^o J PEG (Ex i f) H#fr 
£ N ^^-^A'r>af-^xW>b(OV a 1 u eg|5 
^Dffito J P E G (E x i f ) H«^e>. ffiltt 
v>&H«-r— £XM> — 2»S$^9ttJU A-r>a7;l/ 
dTUXA (SHA-l^MDSft?) UlfrW-TAyS/a. 

[00 4 5] cotiftWItt, Wf»**«fti&trtR 

[0 0 4 6] a*. ±B*aMH-e«7 ? ^*7l/*^9*ff! 
k L rmw L fetfxt -v ^■•©■«MIW#«k: £ o r Jtt 
* « icm^m -o fm%rr— z & £ f a x wess*« 

Mtc. *»Mtt±E*ffliffllu:lBSsn*t>o-ettft<. 

[0 0 4 7] 

e>ttlt)t#*v\ 
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JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2 **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim l] The digital measuring machine machine which measures the physical candidate 
for measurement and is characterized by having a key generation means used for the 
electronic signature of a public key cryptosystem to generate the public key and private 
key of a pair with a key generation algorithm at least, in the digital measuring machine 
machine which gives the electronic signature of a public key cryptosystem to the 
measurement data of the measured physical quantity, and manages measurement data. 
[Claim 2] The digital measuring machine machine according to claim 1 which records the 
electronic signature calculated using said private key to said measurement data with said 
measurement data. 

[Claim 3] The digital measuring machine machine according to claim 1 which memorizes 
the public key certificate which was signed with said private key, and which is not 
rewritable from the exterior. 

[Claim 4] The digital measuring machine machine according to claim 1 which holds the 
sequence number which shows the measured sequence, and which is not rewritable from 
the exterior, and records this sequence number with said measurement data. 
[Claim 5] The digital measuring machine machine according to claim 1 to 4 which enables 
renewal of said key generation algorithm, said electronic signature, and said sequence 
number when at least one external authorization code is held and the external 
authentication over this external authorization code is materialized. 

[Claim 6] The image measuring machine machine which has the characteristic quantity of 
an image as a part of image incidental information on an image data format, and is 
characterized by calculating electronic signature and storing in an image data format by 
making the calculated electronic signature into image incidental information from image 
incidental information using the private key of an image measuring machine machine in 
the image measuring machine machine which gives the electronic signature of a public key 
cryptosystem to image data. 

[Claim 7] The image measuring machine machine according to claim 6 stored in the image 
data format by making into image incidental information whether to have used one 
information of the image incidental information when calculating electronic signature. 
[Claim 8] The image measuring machine machine according to claim 6 which uses the 
private key of an image measuring machine machine based on characteristic quantity, and 
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is stored in an image data format by making into image incidental information the 
electronic signature which calculated and calculated electronic signature while storing the 
characteristic quantity which calculated characteristic quantity and was calculated as 
image incidental information about the image incidental information containing the 
characteristic quantity of an image. 

[Claim 9] While storing the characteristic quantity which calculated characteristic 
quantity and was calculated as image incidental information about the image incidental 
information containing the characteristic quantity of an image Use the private key of an 
image measuring machine machine based on characteristic quantity, and it stores in an 
image data format by making into image incidental information the electronic signature 
which calculated and calculated electronic signature. Moreover, the image measuring 
machine machine according to claim 6 which calculates electronic signature using the 
private key stored in the enternal memory means with which the image measuring 
machine machine was equipped based on characteristic quantity, and also stores the 
electronic signature concerned in an image data format as image incidental information. 
[Claim 10] The image incidental information used in case the characteristic quantity used 
for count of electronic signature is calculated is an image measuring machine machine 
containing the serial number of image data according to claim 6 to 9. 

[Claim 11] The image incidental information used in case the characteristic quantity used 
for count of electronic signature is calculated is an image measuring machine machine 
containing the serial number of an image measuring machine machine according to claim 6 
to 9. 

[Claim 12] The image incidental information used in case the characteristic quantity used 
for count of electronic signature is calculated is an image measuring machine machine 
containing the public key used as the pair of the private key used for count of electronic 
signature according to claim 6 to 9. 

[Claim 13] The image incidental information used in case the characteristic quantity used 
for count of electronic signature is calculated is an image measuring machine machine 
according to claim 6 to 9 which contains the public key used as the pair of the private key 
used for count of electronic signature in the form of a public key certificate. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention changes into digital data the input obtained from a 
digital camera, a scanner, a sensor, FAX (modem), etc. by the detail about a digital 
measuring machine machine and an image measuring machine machine, and relates to the 
data security of the equipment which processes management, transmission, etc. to the 
digital data. 
[0002] 
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[Description of the Prior Art] Various techniques are developed, in order for informational 
electronization to progress quickly, to exchange all information mutually through a 
network or portable media as electronic data and to secure the security of the electronic 
data in recent years, the security technique of the electronic data currently generally 
examined - mainly - the contents of data, such as a secrecy technique of data, an 
alteration detection technique of data, and a management (authentication is included) 
technique of the access privilege to data, not paying one's attention an edge -- while 
there were many security techniques treated as a lump, the ED to which the contents of 
the electronic data are related for whether being the right or not from the first was seldom 
made. However, if the data from the first which are going to secure security are inaccurate, 
no semantics will be made even if it secures the security of the data, if data from the first 
are electronically generated by artificial actuation from the beginning - the contents of the 
data - the right " the implementer who created the data like a Prior art in order to have 
guaranteed things, or its data — being related " responsibility - **** adding the 
electronic signature of those who are etc. will be processed. 

[0003] Then, the method of storing the private key of the digital camera proper in a digital 
camera, calculating electronic signature on U.S. Pat. No. 5,499,294 specifications, as a 
conventional example, using the private key concerned to the image file photoed with the 
digital camera, and recording on a medium with an image file is indicated. The private key 
stored in a detail at the digital camera is Secure in a digital camera. It can ROM-ize to 
Processor, can be recorded on it, and can read no longer from the exterior. Moreover, the 
public key corresponding to the private key is stamped on the body of a digital camera. 
Furthermore, the parameter which shows the public key and photography situation is 
printed to the periphery of the image photoed with the digital camera, and it is made to 
perform electronic signature to it to the whole image. Therefore, as for the image photoed 
with the digital camera, the certification force is heightened. In addition, the public key 
corresponding to a digital camera is premised on the manufacture manufacturer of a 
digital camera opening to the public widely. 
[0004] 

[Problem(s) to be Solved by the Invention] However, according to the above-mentioned 
conventional example, those correlation may not be clear anymore when an image file is 
moved to a personal computer etc., since the photoed image file and the electronic 
signature file which the digital camera calculated to it are separate. Therefore, it was not 
clear anymore which in spite of having performed processing which heightens the 
certification force of an image file with much trouble, is an electronic signature file, and 
there was a problem of it becoming impossible to verify the bona fides of an image file after 
all. 

[0005] Moreover, although the manufacture manufacturer of a digital camera generates 
the pair of a private key and a public key and he is trying to record on the interior of a 
camera, that the digital camera manufacture manufacturer knows the private key also had 
the problem that it was connected with reducing the certification force. 
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[0006] Furthermore, although it was preventing from changing after setting up a setup of a 
timer with a built-in digital camera at the manufacture time, it was what may naturally 
happen that a timer goes wrong gradually, and it was a problem that it cannot be reset as 
right time of day. It was a problem that record of the time of day itself becomes impossible 
to it when the lithium ion battery which is the power source of a timer goes out to it. 
[0007] Moreover, although manufacture meter is to exhibit widely all the public keys 
assigned to digital camera each in the above-mentioned conventional example, having 
considered the case where many digital cameras were manufactured very much, that only 
the part of the number exhibits a public key had the problem that the public key which 
complicatedness increases and corresponds out of a vast quantity of public key lists in the 
case of bona-fides verification of an image had to be discovered. 

[0008] Furthermore, since the digital instrument for general users like a digital camera 
was assumed, there were whose having recorded the data etc. and a problem that it was 
not taken into consideration at all about ********. For example, it is because it may 
become important who measured the data especially in the case of medical-application 
metering devices, such as a CT scanner and digital endoscope equipment, (photography).. 
[0009] moreover - it not being taken into consideration about an addition and exchange of 
the electronic signature algorithm inside equipment, or renewal of a key, but carrying a 
new algorithm in a new product model, since the short digital instrument of the 
comparatively cheap life cycle for general users like a digital camera is assumed - **** - it 
is not stated. However, in the case of large sum digital medical equipment like a CT 
scanner, the life cycle also had the problem that it might be said that it will be long and the 
reinforcement of cryptographic algorithm will become weak relatively in an engine shorter 
than the life of equipment, for example. 

[00 10] This invention aims at offering the digital measuring machine machine and image 
measuring machine machine for solving these troubles which it is [ machine ] and have the 
dependability and the certification force of the contents of electronic digital data 
heightened. 
[0011] 

[Means for Solving the Problem] This invention has the description in having a key 
generation means used for the electronic signature of a public key cryptosystem to 
generate the public key and private key of a pair with a key generation algorithm at least 
in the digital measuring machine machine which manages the measurement data of the 
physical quantity which measured the physical candidate for measurement, in order to 
solve said trouble. Therefore, even a manufacture manufacturer cannot know the 
generated private key. 

[0012] Moreover, it is good only at the public key corresponding to the private key used 
when a private key was not exhibited but ** also drew up a public key certificate by 
memorizing the public key certificate which cannot rewrite the electronic signature 
calculated using the private key to measurement data from the exterior signed with 
recording with measurement data, or a private key. 
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[0013] Furthermore, the context of measurement data can be prevented from getting 
confused by holding the sequence number which shows the measured sequence and which 
is not rewritable from the exterior, and recording this sequence number with measurement 
data. 

[0014] Moreover, when at least one external authorization code is held and the external 
authentication over this external authorization code is materialized, the certification force 
of the measured data can be maintained for a long period of time by enabling renewal of a 
key generation algorithm, electronic signature, and a sequence number. 
[0015] Furthermore, it has the characteristic quantity of an image as a part of incidental 
information on an image data format as another invention. By calculating electronic 
signature using the private key of an image measuring machine machine from image 
incidental information, and carrying out additional storing into an image data format as 
image incidental information Since electronic signature is embedded in the image obtained 
from the image measuring machine machine, can verify whether the image photoed with 
the image measuring machine vessel is altered, and In case the characteristic quantity of 
an image is stored as image incidental information and electronic signature is calculated, 
it can carry out clear [ of using which image incidental information the signature was 
calculated ]. It came to be able to perform modification and an addition by having stored 
electronic signature by doing so also about the incidental information on the part without 
regards to the documentary photography of image data. 
[0016] 

[Embodiment of the Invention] It has a key generation means used for the electronic 
signature of a public key cryptosystem to generate the public key and private key of a pair 
with a key generation algorithm at least. 
[0017] 

[Example] Hereafter, the example of this invention is explained based on a drawing. First, 
with the contents of electronic data, especially the measurement data of physical quantity, 
if an example is given, the reconstruction image data measured and calculated with CT 
(Computed Tomography) equipment used by the image data photoed with the digital 
camera or medicine will be mentioned. Electronic data (when crossing the data to others or 
showing it, it is thought that it will be necessary to guarantee) which will need to 
guarantee the measured physical quantity and correlation, such as data after performing 
processings (the case of a digital camera the case of a CT scanner FBP (Filtered Back 
Projection) image-reconstruction processings by law, such as compression processing of an 
image and gradation transform processing etc.) peculiar to the metering device from the 
measured data like these data, is applicable. And even if it is equipments which generally 
are not called a metering device, such as a digital camera and a CT scanner, it is called the 
"digital measuring machine machine" from the above backgrounds. 

[0018] Di^awing 1 is a block which shows the configuration of the digital measuring 
machine machine concerning the 1st example of this invention. In addition, it shall be 
explained below as a digital measuring machine machine of this example, using a digital 
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camera as an example. This example shown in this drawing is the cryptographic 
algorithms for electronic signature (for example, RSA, MD5, etc.), and cryptographic 
algorithm (for example, DES (Date Encryption Standard).) used for external 
authentication. Although this DES is the cryptographic algorithm of a private key 
cryptosystem, as long as it is applicable to external authentication, the cryptographic 
algorithm of what kind of method is sufficient as it. ROM 11 which stores an image data 
compression algorithm (for example, JPRG), a random-number-generation algorithm, and 
the Maine control program, RAM12 to which the Maine control program, various 
algorithms, a private key, a sequence number, an external authentication key, etc. are 
loaded if needed, EEPROM13 which stores the private key used for the electronic 
signature of a public key cryptosystem, a public key certificate (an authentication engine's 
signature and public key), and a sequence number and an external authentication key, 
Record the digital image information which added a sequence number, time of day, 
electronic signature, etc. to the photoed digital photography image data. For example, the 
communication link port 16 for performing the exchange by the communication link with 
the IC card reader 14 and external device 17 which perform re ad -out/writing for the 
information concerned on IC cards 15, such as a memory card, It is constituted including 
CPU19 which performs the timer 18 which acquires time-of-day data, and various kinds of 
operations, and controls each component, and CCD20 which changes the photoed image 
into electronic data. 

[0019] Next, if actuation of this example is explained and a shutter carbon button will be 
pushed, CPU19 acquires photography image data from CCD20, and stores it in RAM12 at 
the same time it acquires time-of-day data from a timer 18 and memorizes it to RAM12. 
And the stored image data is compressed. Moreover, the sequence number added to the 
sequence number one is stored in EEPROM13 at the same time it takes out a sequence 
number from EEPROM13. The sequence number previously taken out at the head of the 
compressed image data and the time-of-day data acquired from the timer 18 are added. 
And the electronic signature is added to previous image information to the done image 
information, and it stores in IC card 15 as photography information as one lump. In case a 
private key, a public key certificate, a sequence number, and a time-of-day setup are 
changed, if the case where DES is used for the algorithm used for external authentication 
is taken for an example, the following procedures will perform external authentication 
processing which should be performed beforehand. 

[0020] First, a random number is generated inside and the random number is sent out to 
an external device. It compares with the code which enciphered the authorization code 
with reception from the external device, and enciphered the random number generated 
previously with the external authentication key. It supposes that external authentication 
was materialized when those codes were in agreement, and is the security status (flag 
which has managed this by RAM.), an initial state - FALSE - carrying out - it changes 
into TRUE. With reference to the security status first managed inside when modification of 
a private key, a public key certificate, a sequence number, and a time-of-day setup is 
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required from the exterior, when it serves as FALSE, a demand is not received. On the 
other hand, when it is TURE, a demand is received, and processing according to the 
demand is performed. Processing changes the security status into FALSE. 
[0021] Next, it explains below that processing flows to the measurement data in this 
example. First, it investigates whether the key pair (this key pair is a pair of a private key 
and a public key) of equipment is already generated (step S101), when not carried out, 
processing is ended, but if generated, a user public key certificate will be acquired from IC 
card 15 of drawing 1 (step S102). Measurement data (photography data) are acquired from 
CCD20, and current time is further acquired from a timer 18 (steps S103 and S104). And 
conversion to processing required for the acquired measurement data, for example, 
compression, CT image reconstruction, and a standard data format etc. is performed, and 
measurement data [ finishing / processing ] are acquired (step S105). Next, a private key, a 
public key certificate, and a sequence number are acquired from EEPROM13 (step S106). 
One **** is made the acquired sequence number and it stores in EEPROM13 (step S107). 
Let the thing which was having current time and a sequence number added to 
measurement data [ finishing / processing ] be measurement information (step S108). A 
hash value is calculated to this measurement information (step S109). It is enciphered by 
the private key and the calculated hash value calculates the electronic signature of 
equipment (step SI 10). The user electronic signature which enciphered the hash value by 
which count was carried out [ above-mentioned ] by the private key of delivery and a user 
to the IC card is acquired (step Sill). And the electronic signature and public key 
certificate of equipment are added to measurement information, and it considers as 
measurement information [ finishing / the signature of equipment ] (step SI 12). 
Furthermore, user electronic signature and a user public key certificate are added, and it 
considers as the signed measurement information of equipment and a user (step SI 13). It 
records on a mass external record medium by considering done signed measurement 
information as a file (step SI 14 (or it sends out to an external device from the 
communication link port 16)). 

[0022] Thus, a signature of a user is generated using enternal memory means, such as an 
IC card with a code processing facility and a memory storage function, and the metering 
device itself is not attesting the user only by having given the signed measurement 
information on equipment with a user's public key certificate. If signed measurement 
information is verified, although the user would be whom or this will carry out "later" 
authentication, since it is made, there is. On the other hand, as long as the metering device 
itself can attest a user beforehand, you may be other approaches, a user is attested for a 
metering device, as long as it is clear and is, a user name may only be given to processed 
measurement data with a sequence number etc., and electronic signature processing may- 
be performed. When not using an IC card, a metering device does not need to carry the IC 
card reader 14. It assumes that the serial number of equipment, the manufacture meter 
name, etc. are indicated by the public key certificate of equipment, and the user name 
which can specify a user as a user's public key certificate, affiliation, etc. are indicated. 



7/14 



Japanese Publication number : 2000-215379 A 



About the public key certificate of equipment, equipment is enabled to send out outside 
according to the demand from the outside. Moreover, in this example, although electronic 
signature is immediately created after creating measurement information, since 
computation time starts creation of electronic signature, un-arranging may arise to 
measure continuously. Then, the created measurement information is recorded on mass 
external storage as it is, and before sending out outside later, or before it removes a mass 
storage medium from measurement information, you may make it create and give 
electronic signature. In that case, it is necessary to prevent from accessing the 
measurement information which has not given electronic signature - mass external 
storage prevents from removing from the body of a metering device etc. - from an external 
device until it gives electronic signature. 

[0023] Moreover, although he is trying to only add incidental information (current time, a 
sequence number, public key certificate, etc.) behind processed measurement data, since 
the data of arbitration can be embedded as an image data format, for example in the case 
of a JPEG image, these incidental information is also recordable on the part using it. By 
doing so, though it is the file where electronic signature was embedded, it also becomes 
possible for the existing image display program etc. to process. Since that it must be 
careful in that case has the absolute location for where image data has begun from as a tag 
in the case of TIFF etc., when electronic signature is embedded, the absolute location will 
shift. Then, in order to avoid such a problem, as shown in drawing 3 , only the part which 
embeds electronic signature beforehand secures a field, and the field is fill uped with the 
value decided beforehand, calculates a hash value to the whole data on it, and generates 
electronic signature. And it is also possible to embed the generated electronic signature to 
the field secured beforehand. Before performing data measurement, key pair generation 
processing must be performed beforehand. For example, a metering- device manufacture 
manufacturer performs this processing before shipment at works. 

[0024] Next, it investigates whether the key pair is already recorded on EEPROM of a 
measuring machine machine (step S201), and if key pair generation processing is 
explained based on drawing 4 and drawing 5 , since it is not necessary to generate if the 
key pair is recorded, processing will be ended. On the other hand, if the key pair is not 
recorded, as shown in drawing 4 , a key generation algorithm will generate a key pair (step 
S202). And the generated key pair is recorded on EEPROM (step S203). Next, a public key 
is transmitted to an external device through a communication link port among key pairs 
(step S204). As shown in drawing 4 , in an external device, a public key certificate is drawn 
up to a public key, and the public key certificate concerned is passed to a digital measuring 
machine machine through a communication link port (steps S205 and S206). And a public 
key certificate is recorded on EEPROM (step S207). 

[0025] Moreover, if the processing which sets up the internal timer of a metering device is 
said in an easy example, a keypad will be attached in a metering device, a password is 
entered from a keypad, and if a metering device collates with the password currently held 
inside and is right, how to permit setting modification of a timer can be considered. Since 
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the metering device carries IC card reader like above-mentioned this example in others, it 
is also thought of that a specific IC card enables it to change a setup of a timer only into an 
insertion ********** case. In order for being inserted to verify whether it is a specific IC 
card, the following approaches can be taken, for example. As shown in drawing 6 , a 
measuring machine machine manufacturers public key is beforehand stored in the interior 
of a metering device. And if the random number which the metering device generated first, 
and random-number [ which decoded the authorization code from an IC card ]' are in 
agreement, the IC card will have a secret key and it can attest that it is a specific code. 
[0026] About an update process of cryptographic algorithm, if setting processing of a timer 
explains, for example, what enables it to receive a new code processing program through a 
communication link port only to the midst which is inserting the specific IC card can be 
considered. Or if a manufacture manufacturers electronic signature is given to a code 
processing program and a metering device is passed as shown in drawing 7 , how to use 
[ for a metering device to verify the electronic signature, to store the code processing 
program in an internal* storage medium, if it is verifiable that it is right electronic 
signature, and ] it for cipher processing will also be considered. Also in this example, it 
assumes having held a manufacture manufacturer's public key beforehand to the metering 
device. It assumes that the algorithm which calculates a hash value, the algorithm which 
generates a key pair, and the algorithm to encipher and the algorithm to decode are 
contained in a code processing program. 

[0027] Moreover, although stated as an update process of cryptographic algorithm above, it 
does not update about cryptographic algorithm but only an addition may not be made to be 
not possible. Although what has reinforcement high with the cryptographic algorithm 
registered later being natural should be used, when an old code processing program is 
brought and someone installs in a metering device unjustly, it can prevent the certification 
force of a metering device in which the newest code processing program is already carried 
declining. It does not come out so much and possibility that a defect will be found in the 
newest cryptographic algorithm is large compared with an old algorithm. Therefore, you 
may make it give both the electronic signature of an old algorithm, and the electronic 
signature by the newly installed cryptographic algorithm to measurement information. 
Moreover, about cryptographic algorithm, since a new algorithm has large possibility of 
needing computational complexity more, it may be made to replace the processor which 
performs not exchange but the code processing program as a code processing program. In 
that case, although a cipher-processing processor needs to attest whether it is what was 
made by the just manufacture manufacturer, the structure can apply the completely same 
processing as the processing which verifies previously whether it is a specific IC card. A 
cipher-processing processor module can consider the gestalt of a PCMCIA card etc. Or the 
physical interface between a cipher-processing processor and a metering device may be 
made special, or approaches, such as making special the protocol between the processor of 
a metering device and a cipher-processing processor, and making it secret, may be taken. 
In such a case, it is not necessary to attest a cipher-processing processor. Detailed 



9/14 



Japanese Publication number : 2000-215379 A 



explanation is omitted although the configuration of the metering device at the time of 
dividing into the processor of a metering device and the processor for cipher processing 
becomes like drawing 8 . 

[0028] In the 1st example of the above, the field which stores electronic signature in 
measurement data was reserved, the digital measuring machine machine calculated 
electronic signature to the whole measurement data in the condition of having carried out 
NULL padding of the part beforehand, and the approach of storing the electronic signature 
in the previous reservation field was taken. There was a problem to come to store other 
information, for example, a comment etc., in measurement data further, after storing 
electronic signature in measurement data in the case of this approach. That is, even if it 
was the attribute information without regards to the certification force of measurement 
data, when it added other attribute information to measurement data later, or 
modification was added to it, it may have become data with which the measurement data 
itself differ, and verification of electronic signature may have become impossible. 
[0029] Then, the 2nd example explained below is clarifying the object which calculated 
electronic signature, and also when it adds another attribute information later, it enables 
verification of electronic signature. 

[0030] About the 2nd example, the graphics format of Exif (Exchangeable image file format 
for digital still camera) is made into an example, and is explained. Drawing 9 is drawing 
showing the contents of the graphics format of Exif. In addition, the attribute information 
on electronic signature and its electronic signature is Exif which describes the information 
about image photography conditions. Security which is the assembly of the tag for 
describing security information to GPSIFD and juxtaposition which describe IFD and GPS 
information It considers defining a thing called IFD uniquely and storing it as an example. 
In that case, it is Exif. IFD and GPS Information which is helpful for raising the 
certification force of measurement data (the case of a digital camera digital photography 
data) to IFD, For example, since the information in connection with measurement 
conditions, such as the date and a photography location, is included, This information is 
information to protect by electronic signature so that it may not be altered, and it is an 
object to protect also about the information which is needed for reproducing it with the 
body of measurement data itself with a natural thing. I want to specifically protect to a 
DQT marker to an EOI marker's this side. Therefore, Exif Although what is necessary will 
be just to manage that it is the electronic signature attached even to an EOI marker from 
IFD, GPSIFD, and a DQT marker as attribute information on electronic signature A 
specification top is ExiflFD and GPS. A comment can be recorded now into IFD. From after 
to Exif It is Exif when the comment has been added into IFD. Since IFD will be in the 
condition of differing from before, verification of electronic signature will become 
impossible. Then, the information which specifies the data used when calculating 
electronic signature is recorded as attribute information on electronic signature. 
[0031] Next, the procedure which gives electronic signature to the photoed digital image is 
explained below based on drawing 10 . Here, it has already assumed that the digital image 
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is changed into the JPEG (Exif) format. 

[0032] (l) Calculate a hash value (characteristic quantity) by hash algorithms, such as 
SHA-1 and MD5, to an image data stream (I want to make it proof) to protect first (step 
S1001). (to for example, a DQT marker to an EOI marker's this side) This calculated value 
is called an image hash value. 

[0033] (2) Create the TLV data element (Tag (it writes by "T] among drawing), Length (it 
writes by "L" among drawing), Value (it writes by "V" among drawing)) which has a 
previous image hash value as a Value section using the tag number which shows that it is 
an image hash (step S1002). This created thing is called an image hash data element. 
[0034] (3) Add a previous image hash data element to SecuritylFD newly defined uniquely 
to the Exif format (step S1003). 

[0035] (4) Exif IFD, GPS IFD, Security The list of tags of the data element which is helpful 
as documentary photography included in IFD is created (step S1004). This is called a hash 
tag list. In addition, in this hash tag list, it is Exif. The photography time data element in 
IFD, and Security The image hash data element in IFD, a photography person data 
element, etc. will be contained. 

[0036] (5) Calculate one hash value by applying the Value section (the Value section stored 
in the somewhere else when the Value section is over 4 bytes and the original Value section 
is recorded on somewhere else) of each data element corresponding to the tag included in 
the hash tag list to order at hash algorithms, such as SHA-1 and MD5, (step S1005). This 
calculated value is called a data hash value. 

[0037] (6) Create the TLV data element which has the data hash value as a Value section 
using the tag number which shows that it is a data hash (step S1006). This created thing is 
called a data hash data element. 

[0038] (7) Encipher a previous data hash value by the private key in the internal- storage 
medium of a digital camera (step S1007). This enciphered thing is called a data signature. 
[0039] (8) Create the TLV data element which has the value of the data signature as a 
Value section using the tag number which shows that it is a data signature (step S1008). 
This created thing is called a data signature data element. 

[0040] (9) Security A previous data hash data element and a previous data signature data 
element are added to IFD (step S1009). 

[0041] (10) The done Exif image data is recorded on the mass storage medium of a digital 
camera. 

[0042] Like the data description approach of TIFF, although not stated to a detail, when 
the part of V of TLV exceeds 4 bytes (a hash value etc. is about 8 bytes), the offset pointer 
which points somewhere else out to V is recorded, and the value of V is recorded on the 
somewhere else. 

[0043] Thus, the image of the created digital camera with electronic signature can verify 
the bona fides with the following procedure. 

[0044] First, the Value section of a data signature data element is taken out from a JPEG 
(Exif) image. A data signature is decoded by the public key of a digital camera. The Value 
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section of a data hash data element is taken out from a JPEG (Exif) image. It checks 
whether the data hash value for verification and a data hash value are in agreement, if not 
in agreement - image data - what - it is -- the alteration is performed. The Value section 
of a hash tag list data element is taken out from a JPEG (ExlD image. A hash value is 
calculated by taking out in order the Value section of the data element applicable to the tag 
currently recorded on the hash tag list, and applying to a hash algorithm. It checks 
whether a re-calculation hash value and a previous hash value are in agreement, if not in 
agreement - image data - what ■- it is — the alteration is performed. The Value section of 
an image hash data element is taken out from a JPEG (Exif) image. A hash value is 
calculated by taking out the protected image data stream section from a JPEG (Exii) image, 
and applying to hash algorithms (SHA-1, MD5, etc.). It checks whether the image hash 
value for verification and an image hash value are in agreement, if not in agreement — 
image data - what - it is - the alteration is performed. If abnormalities are not found in 
the above processing, since image data is not altered (possibility of having been altered is 
very low), it can be judged that bona fides are secured. 

[0045] Such processing can also take the approach of decoding the data signature currently 
conversely embedded at image data in the part which calculates a hash value etc. later on 
and finally enciphers the same procedure as embedding electronic signature with a natural 
thing although the way of having followed conversely the procedure at the time of 
embedding electronic signature is carried out by the private key by the public key, and 
comparing a data hash value. 

[0046] In addition, although the above-mentioned example explained the digital camera as 
an example, it cannot be overemphasized that it is applicable also to the image data 
obtained with the image processing system like the image data transmitted and received 
by image data or FAX optically read with image reading means, such as a scanner. 
Furthermore, this invention is not limited to the above-mentioned example, and if it is the 
publication in a patent claim, neither deformation of a variety nor a replaceable thing can 
be overemphasized. 
[0047] 

[Effect of the Invention] As explained above, according to this invention, the description is 
in the digital measuring machine machine which manages the measurement data of the 
physical quantity which measured the physical candidate for measurement to have a key 
generation means used for the electronic signature of a public key cryptosystem to 
generate the public key and private key of a pair with a key generation algorithm at least. 
Therefore, even a manufacture manufacturer cannot know the generated private key. 
[0048] Moreover, it is good only at the public key corresponding to the private key used 
when a private key was not exhibited but ** also drew up a public key certificate by 
memorizing the public key certificate which cannot rewrite the electronic signature 
calculated using the private key to measurement data from the exterior signed with 
recording with measurement data, or a private key. 

[0049] Furthermore, the context of measurement data can be prevented from getting 
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confused by holding the sequence number which shows the measured sequence and which 
is not rewritable from the exterior, and recording this sequence number with measurement 
data. 

[0050] Moreover, when at least one external authorization code is held and the external 
authentication over this external authorization code is materialized, the certification force 
of the measured data can be maintained for a long period of time by enabling renewal of a 
key generation algorithm, electronic signature, and a sequence number. 
[0051] Furthermore, since electronic signature is embedded in the image obtained with the 
image measuring machine vessel, it can verify whether the image obtained with the image 
measuring machine vessel is altered. In that case, when electronic signature is stored in a 
digital image, and the digital image itself stored electronic signature, it may change. It also 
becomes impossible moreover, to add image incidental information afterwards. In order to 
prevent it, when the characteristic quantity of the image-data stream section of an image 
was stored as image incidental information and electronic signature was calculated, it 
clarified using which image incidental information the signature was calculated. It came to 
be able to perform modification and an addition by having stored electronic signature by 
doing so also about the incidental information on the part without regards to the 
documentary photography of image data. 

DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing l] It is the block diagram showing the outline of the configuration of the digital 
measuring machine machine concerning the 1st example of this invention. 
[Drawing 2] It is the flow chart which shows the flow of the processing to the measurement 
data in this example. 

[Drawing 3] It is drawing showing the situation of storing of the electronic signature in 
this example. 

[Drawing 4] It is drawing showing the situation of the key pair generation processing in 
this example. 

[Drawing 5] It is the flow chart which shows the flow of generation processing of the key 
pair in this example. 

[Drawing 6] It is drawing showing the situation of the external authentication in this 
example. 

[Drawing 7] It is drawing showing the situation of an update process of the cryptographic 
algorithm in this example. 

[Drawing 8] It is the block diagram showing the configuration of the example which added 

the cipher-processing processor which can be replaced. 

[Drawing 9] It is drawing showing the contents of the graphics format. 

[Drawing 10] It is drawing showing the situation of the storing procedure of the electronic 
signature in the image measuring machine machine concerning the 2nd example of this 
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invention. 

[Description of Notations] 

11: ROM, 12:RAM, 13:EEPROM, 141C card reader 15: An IC card, 16 Communication link 
port, 17:external device, 18:timer, 19:CPU, 20:CCD, 21 Cipher-processing processor. 
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